This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi.
I'd like to create a new AzureAD policy in PowerShell to extend the access token lifetime to 365days (8760H) by following this procedure.
Ref Docs.
I've done Connect-AzureAD.
But New-AzureADPolicy returned the following error.
Please tell me how to resolve it.
The Global Administrator role has been assigned to this account.
Best reards.
@Relephant ,
Just checking in to see whether the response was helpful. If this solves your question, please don't forget to click "Accept the answer" and Up-Vote for it, which may be useful to other members of the community reading this topic. Please let us know if you have any further questions.
Thanks,
Maximum lifetime for an access token can be 24h: https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes#access-id-and-saml2-token-lifetime-policy-properties
Hi, @Vasil Michev
Thanks for the reply. I heard that lifetime for an access token has no limit theoretically in this thread, but is it impossible to extend lifetime to a few months or a few years?
They were likely referring to the lifetime of the refresh token, not the access one. That's a different scenario altogether.
Thanks, @Vasil Michev
OK. So is there any way to create a Teams online meeting with the Graph API Create onlinMeeting using one access token as long as my application works?
You can use same access token as many times as you want until it expires (Default token lifetime is 1 hours, with a maximum of 24 hours configurable), so your application must authenticate with Azure AD to obtain a new token before the current token expires in order to continue using the Create onlinMeeting API call. This approach is common for all scenario whereas you must consider utilizing a shorter lifespan token rather than a longer one to avoid any security breach.
Thanks @sikumars-msft .
So, if I extend the lifetime of an access token to 24 hours, I need to get a new access token more than 24 hours have passed and then create an online meeting with a new access token?
Is there a way to get an refresh token for my application without a user?
In other words, I'd like to use the same access token (or a refresh token?) to create a online meeting for more than one year.
My apologies for the delay in responding.
Unfortunately no, this is not a supported scenario since a refresh token is only granted when a user context involved in authentication. As a result, you must design your app to authenticate on or before the current token expires.